Collaborative efforts can be facilitated by harmonising requirements for next-generation cyber defence capabilities, which might possibly lead to joint development and procurement initiatives and integrated life-cycle support. For this reason, EDA and EU Military Staff will develop recommendations on a set of EU cyber defence interoperability requirements. Those requirements must be considered throughout all planning horizons to guarantee all aspects of standardisation as the critical enabler for interoperability. Requirements for testing, evaluation and certification are other critical enablers. Harmonised standards for cybersecurity will be developed for hardware and software products and components in the context of the proposed Cyber Resilience Act34. Such standards will concern all civilian and dual-use products with digital elements, which make up a large share of the products used in defence sector. Where possible, the Commission will encourage coherence with defence-related cybersecurity standards for digital products. As set out in the Action plan on Synergies between civilian, defence and space industries35 (the ‘Synergies Action Plan’), the Commission in close cooperation with key stakeholders will present a plan to promote the use of existing hybrid civil/defence standards and the development of new ones . Cooperation should further develop between all relevant stakeholders, including European standardisation organisations, North Atlantic Treaty Organization (NATO) and other partners, making best use to that end of the European Defence Standardisation Committee. In a similar vein, when military standardisation bodies develop new cybersecurity-related standards for products with digital elements for defence use, harmonised standards developed under the Cyber Resilience Act should be used as a baseline36. Cyber defence actions    Support Member States in the development of non-legally binding recommendations for the defence community, inspired by NIS2, to contribute to an increased overall cyber defence maturity at national level. Develop recommendations on EU cyber defence interoperability requirements. Enhance cooperation with all relevant actors on defence-related standards in the framework of the European Defence Standardisation Committee. Civilian support actions   Develop risk scenarios for critical infrastructure of importance to military communication and mobility to target preparedness actions including through penetration testing. Foster cooperation between civilian and military standardisation bodies for the development of harmonised standards for dual use products. 3. Invest in cyber defence capabilities 34 COM/2022/454 final COM(2021) 70 final 36 Standardisation work is currently ongoing in relation to cybersecurity requirements concerning radio equipment, on the basis of Delegated Regulation (EU) 2022/30. If the Commission repeals or amends this delegated regulation with the consequence that it ceases to apply to certain products subject to the Cyber Resilience Act, the Commission and the European Standardisation Organisations should take into account the standardisation work carried out in the context of Commission Implementing Decision C(2022)5637 on the standardisation request for the above-mentioned delegated regulation in the preparation and development of harmonised standards to facilitate the implementation of the Cyber Resilience Act. 35 11

Select target paragraph3

Connect to a paragraph
Connect to an entity
Disable highlights
Add to table of contents